TWI835134B - Card reader and controller thereof, and method for permission management - Google Patents

Abstract

A card reader and a controller thereof, and a method for permission management are provided. The card reader includes a storage device and the controller, wherein the controller is coupled to the storage device. The storage device is configured to store specific identification data of a specific memory device. The controller is configured to receive identification data of an external memory device from the external memory device which is plugged in the card reader, and determine whether the external memory device is the specific memory device according to the identification data and the specific identification data, to generate a determination result. More particularly, the controller may control whether to allow permission of at least one function according to the determination result.

Description

Card reader and its controller and rights management method

The present invention relates to a card reader, and in particular, to a card reader, its controller and an authority management method.

With the advent of the digital age, digital data has slowly replaced physical data such as paper. In order to prevent malicious parties from obtaining private information, many manufacturers have launched flash drives with security mechanisms to protect the data stored in them. For example, the flash drive can be equipped with a numeric keyboard for entering passwords or an identification module that can sense fingerprints. However, this approach makes it easy for interested parties to learn that such devices store private information. In addition, compared with a typical flash drive, such a device requires an additional keyboard module or fingerprint recognition module to be installed on it. In addition to increasing the size of the product, it also significantly increases the manufacturing cost and makes it difficult to popularize.

Therefore, a novel method and related architecture are needed to provide relevant security mechanisms to protect private data in storage devices with no or less side effects.

The object of the present invention is to provide a card reader, its controller and a rights management method, so as to provide an information security mechanism for a memory device while maintaining the functions and appearance of a typical card reader.

At least one embodiment of the present invention provides a card reader. The card reader includes a storage device and a controller, wherein the controller is coupled to the storage device. The storage device is used to store specific identification data of a specific memory device, and the controller is used to access an external memory plugged into the card reader. The device receives the identification data of the external memory device and determines whether the external memory device is the specific memory device based on the identification data and the specific identification data to generate a judgment result. In particular, the controller can control whether to open the permission of at least one function based on the judgment result.

At least one embodiment of the present invention provides a controller of a card reader. The controller includes a processing circuit, and the processing circuit is coupled to a storage device. The processing circuit is used to control the operation of the controller based on data in the storage device, wherein the storage device is used to store specific identification data of a specific memory device. For example, the controller can receive the identification data of the external memory device from an external memory device inserted into the card reader, and determine whether the external memory device is the specific memory device based on the identification data and the specific identification data to generate One judgment result. In particular, the controller can control whether to open the permission of at least one function based on the judgment result.

At least one embodiment of the present invention provides a rights management method, wherein the method is applicable to a controller of a card reader. The method includes: using the controller to receive identification data of the external memory device from an external memory device inserted into the card reader; using the controller to determine whether the external memory device is a specific memory device based on the identification data to generate A judgment result; and using the controller to control whether to open the permission of at least one function based on the judgment result.

The card reader and its controller and method provided by embodiments of the present invention can use a specific memory device as a key. When a user wants to access a protected embedded memory, the specific memory device needs to be inserted into the reader. Only the card machine can gain access to the embedded memory. Since the card reader slot is an existing mechanism in many electronic devices, it is less likely to attract the attention of interested parties. Furthermore, embodiments of the present invention do not impose significant additional costs. Therefore, the present invention can solve the problems of related technologies with no or less side effects.

10,30: Electronic devices

50: Main device

40,60:Laptop

100:Card reader

110:Card reader controller

110P: Processing circuit

110M: storage device

120,121,122: Secure digital memory card socket

130,131,132,133: Embedded multimedia memory card

141,142:LED light

151:System disk

152:Data disc

160: USB hub

171,172: USB port

180: USB Ethernet

190:RJ45 port

700:USB docking station

S210~S240, S510~S550, S810~S830: steps

FIG. 1 is a schematic diagram of an electronic device according to an embodiment of the present invention.

Figure 2 shows the workflow of using a secure digital memory card as a key according to an embodiment of the present invention.

FIG. 3 is a schematic diagram of an electronic device according to an embodiment of the present invention.

Figure 4 is a schematic diagram of a notebook computer according to an embodiment of the present invention.

Figure 5 illustrates the workflow of using a secure digital memory card to unlock the notebook computer shown in Figure 4 according to an embodiment of the present invention.

Figure 6 is a schematic diagram of a notebook computer according to an embodiment of the present invention.

Figure 7 is a schematic diagram of an expansion base device according to an embodiment of the present invention.

Figure 8 is a work flow of a rights management method according to an embodiment of the present invention.

Figure 1 is a schematic diagram of an electronic device 10 according to an embodiment of the present invention. The electronic device 10 may include a main device 50 and a card reader 100. Examples of the main device 50 may include (but are not limited to) a system on a chip (SoC) and a chipset, where the main device 50 can access one or more memory cards through the card reader 100 . The card reader 100 can be used as a bridge to interconnect memory card protocols such as the Secure Digital protocol used by secure digital memory cards, and the Express peripheral components used by Secure Digital Express (SD Express) memory cards. Peripheral Component Interconnect Express (PCIe) protocol, the Multimedia Card protocol used by Multimedia Card (MMC) and embedded MMC (eMMC), and Universal Flash Storage (UFS) ) is converted into a protocol used by the host device 50 such as a Universal Serial Bus (USB) protocol.

As shown in Figure 1, the card reader 100 may include a card reader controller 110, a storage device 110M, a secure digital memory card socket (SD socket for short) 120, an embedded storage device such as A removable multimedia memory card 130 (labeled "eMMC" in Figure 1 for simplicity), and one or more signal lights such as light-emitting diode (LED) lights 141 and 142 (in Figure 1 Labeled "LED" in the figure for simplicity). The card reader controller 110 may include a processing circuit 110P, wherein the storage device 110M is coupled to the card reader controller 110 (eg, the processing circuit 110P therein). In this embodiment, the SD socket 120 can be exposed on the casing of the card reader 100 to allow the user to insert any secure digital memory card (SD card for short) into the card reader 100 . The embedded multimedia memory card 130 can be disposed inside the card reader 100 without being exposed. The embedded multimedia memory card 130 in this embodiment is disposed inside the card reader 100, but the invention is not limited thereto. It should be noted that the SD socket 120 and the embedded multimedia memory card 130 in this embodiment are only for illustration purposes and do not limit the present invention. In some embodiments, other standard memory card sockets can be used as an alternative design to the SD socket 120, and comply with the universal flash memory storage standard or the non-volatile memory express (NVMe) standard. Embedded storage devices and SD cards that are mechanically embedded inside the card reader 100 can be used as alternative designs for the embedded multimedia memory card 130 .

It should be noted that the storage device 110M is implemented outside the card reader controller 110, but the present invention is not limited thereto. In some embodiments, the storage device 110M may be a part of the card reader controller 110 (eg, the storage device 110M may be built into the card reader controller 110).

In this embodiment, the electronic device 10 may be a device equipped with a card reader, but the invention is not limited thereto. In some embodiments, the card reader 100 and the main device 50 can be independent devices. For example, the card reader 100 can be an external card reader, and the main device 50 can be a desktop computer or a laptop. A computer or any device that can be connected to a card reader. The card reader 100 can be connected to the main device 50 through a connection line that complies with the universal serial bus, but the invention is not limited thereto.

In this embodiment, the storage device 110M can be used to store specific identification data of a specific memory device. The card reader controller 110 may receive identification data from an external memory device inserted into the card reader 100 (for example, the SD socket 120), and based on the identification data and the specific identification The card reader controller 110 can control whether to open permission for at least one function based on the judgment result by identifying the data to determine whether the external memory device is the specific memory device. Specifically, information such as the manufacturer, card name, version, serial number and/or manufacturing date of any memory card can be recorded as the identification data of any memory card. Taking an SD card as an example, any SD card can have a card identification register (CID) to record the above identification data. In particular, this identification data is typically unique and can therefore be used to identify different memory cards. Specifically, when an external storage device (such as a specific SD card) is selected as the key to unlock the permissions of at least one of the above functions, the identification data of the external storage device can be used through the software when it is inserted into the card reader 100 It is recorded in the storage device 110M, or the relevant information is written directly into the storage device 110M by the manufacturer, but is not limited to the above method, for subsequent identification, in which the specific SD card can be an example of the above-mentioned specific memory device. , and the memory card identification data of the specific SD card may be an example of the above-mentioned specific identification data.

In this embodiment, the card reader 100 can map logical unit number (LUN) #0 to the SD card inserted into the SD socket 120 , and map logical unit number #1 to the embedded multimedia memory card 130 . However, since the embedded multimedia memory card 130 corresponding to the logical unit number #1 is not exposed outside the electronic device 10, although the card reader 100 is a multi-logical unit number (multi-LUN) card reader, it does not appear to be the same in appearance. The upper card reader 100 is similar to a single-logical unit number (single-LUN) card reader. When the card reader 100 is powered on and connected to the host device 50 , if no memory card is inserted into the SD socket 120 , the card reader 100 can avoid transmitting any data of the embedded multimedia memory card 130 to the host device 50 . If the user inserts the specific SD card into the SD socket 120, the card reader controller 110 can determine that the identification data of the specific SD card matches the identification data in the storage device 110M, so data other than the specific SD card can be transmitted. In addition to the main device 50 , data on the embedded multimedia memory card 130 can also be transferred to the main device 50 . On the contrary, if the user inserts any memory card other than the specific SD card into the SD socket 120, since the identification data of this memory card does not match the identification data in the storage device 110M, the judgment result can indicate that this memory card Instead of this particular SD card, the card reader controller 110 may avoid opening access to the card corresponding to logical unit number #1. The permissions of the data in the memory (i.e., the embedded multimedia memory card 130). For example, when the judgment result indicates that the memory card is not the specific SD card, the card reader controller 110 can notify the host device 50 that the logical unit number #1 does not exist, and the host device 50 cannot access the embedded multimedia. Memory card 130.

Figure 2 shows a workflow for using an SD card as a key according to an embodiment of the present invention, where the workflow is applicable to the card reader 100 shown in Figure 1 . It should be noted that the work flow shown in Figure 2 is for illustrative purposes only and does not limit the present invention. In particular, one or more steps may be added, deleted or modified in the workflow shown in Figure 2. Furthermore, these steps do not have to be performed exactly as shown in Figure 2 as long as they do not interfere with the overall result.

In step S210, the user can insert the SD card into the card reader 100, so that the SD card corresponds to the logical unit number #0 (marked as "insert SD card, corresponding to LUN0" in Figure 2 for simplicity) .

In step S220, the card reader controller 110 may check the memory card identification data of the SD card to determine whether the identification data of the SD card has been recorded in the card reader 100 (eg, recorded in the storage device 110M) (in In the second picture, it is marked as "Check the CID of the SD card to determine whether it is a specific SD card" for easier understanding). If the determination result is "Yes", proceed to step S230; if the determination result is "No", proceed to step S240.

In step S230, the card reader controller 110 may report the logical unit number #1 to the host device 50 to allow the host device 50 to access the memory corresponding to the logical unit number #1 (labeled " Show LUN1" for simplicity).

In step S240, the card reader controller 110 may avoid reporting the logical unit number #1 to the host device 50 to prevent the host device 50 from accessing the memory corresponding to the logical unit number #1 (marked as "not showing LUN1" in Figure 2 for simplicity).

In order to further enhance the security of the private data in the memory corresponding to the logical unit number #1 (such as the embedded multimedia memory card 130), when the judgment result generated by the card reader controller 110 indicates that the external memory device is the specific memory device (for example, when the judgment result indicates that the card reader 100 is inserted When the memory card is a specific SD card), the card reader controller 110 may further detect a plug-in/out state of the specific memory device to generate a detection result. For example, in addition to recording the identification data of the specific SD card in the storage device 110M in advance, the user or manufacturer can also pre-encode a specific insertion and removal mode (such as a specific insertion and removal method) of the specific SD card. , to generate an encoding result corresponding to the specific plugging and unplugging pattern, and record the encoding result in the storage device 110M. When the detection result indicates that the insertion and removal pattern of the specific SD card matches the specific insertion and removal pattern, the card reader controller 110 may allow the host device 50 to access the embedded multimedia memory card 130 . When the detection result indicates that the insertion and removal pattern of the specific SD card does not comply with the specific insertion and removal pattern, the card reader controller 110 can prevent the host device 50 from accessing the embedded multimedia memory card 130 .

In some embodiments, the plugging and unplugging pattern may include the number of plugging and unplugging of the specific memory device within a specific period of time. For example, the encoding result recorded in the storage device 110M may correspond to plugging and unplugging the specific SD card a specific number of times (e.g., three times) within a specific period of time (e.g., thirty seconds), wherein the user is required to plug and unplug the specific SD card the specific number of times. Only a specific SD card (for example, within thirty seconds) can open access to the embedded multimedia memory card 130 (for example, the user must insert and remove the specific SD card three times within thirty seconds to enable access to the embedded multimedia memory card 130 data is displayed).

In some embodiments, the plugging and unplugging pattern may include a plurality of plugging and unplugging times of the specific memory device within a plurality of specific time periods. For example, the encoding results recorded in the storage device 110M may correspond to the encoding results recorded in a plurality of specific time periods (eg, a first specific time period of thirty seconds, a second specific time period of thirty seconds, and a third specific time period of thirty seconds). Corresponding times of plugging and unplugging the specific SD card (for example, plugging and unplugging the specific SD card twice within the first specific time period, inserting and unplugging the specific SD card five times within the second specific time period, and inserting and unplugging the specific SD card within the third specific time period. Insert and unplug the specific SD card four times), in which the user must insert and unplug the specific SD card a corresponding number of times within the multiple specific periods to open the access permission to the embedded multimedia memory card 130 (for example, the user must Only by inserting and unplugging the specific SD card twice within the first specific time period, inserting and unplugging the specific SD card five times within the second specific time period, and inserting and unplugging the specific SD card four times within the third specific time period can causing the data in the embedded multimedia memory card 130 to be displayed). At this time, the LED light signal of the card reader will be Helps users determine when to insert cards. In the embodiment of FIG. 1 , the LED light 141 of the card reader 100 can be used to indicate the power status. When no SD card is inserted into the SD socket 130 , the LED light 141 can be always on. In addition, the LED light 142 can be used to indicate the reading/writing status of data, wherein the LED light 142 can flash to indicate that data is being read/written through the card reader 100 . In this embodiment, the light signal of the LED light 141 can be used to remind the user of the current input status (for example, used to define the first specific time period, the second specific time period, and the third specific time period). For example, after the specific SD card is inserted into the card reader 100 for the first time, the LED light 141 can flash for thirty seconds to remind the user that it has entered the first specific period, and it needs to be inserted or removed within the first specific period. The specific SD card is used twice, so the user must insert and unplug the specific SD card again within thirty seconds. After thirty seconds, the LED light 141 can turn constant light to prompt the user to start the next round of input. When the user re-inserts the specific SD card after the LED light 141 becomes constant light, the LED light 141 can flash for thirty seconds to remind the user that the user has entered the second specific period, in which it is necessary to The specific SD card is inserted and unplugged five times, so the user must insert and unplug the specific SD card four more times within thirty seconds, and after thirty seconds, the LED light 141 can become constant to remind the user that the next round can be started. input. When the user re-inserts the specific SD card after the LED light 141 becomes constant light, the LED light 141 can flash for thirty seconds to remind the user that the user has entered the third specific period, in which it is necessary to The specific SD card is inserted and unplugged three times, so the user must insert and unplug the specific SD card twice more within thirty seconds and finally leave the specific SD card on the SD socket 120. After thirty seconds, the LED light 141 Can be turned into constant light. The user must insert and unplug the specific SD card the correct number of times within the first specific time period, the second specific time period and the third specific time period, corresponding to the memory of logical unit number #1 (such as embedded multimedia memory). Only the private information in the card 130) can be displayed.

It should be noted that the above method of using LED lights to remind the user of the current input stage is only for illustrative purposes and does not limit the present invention. In some embodiments, the above-mentioned LED light signal can remind the user through breathing light, color change, or other means.

In some embodiments, the plugging and unplugging state may include the specific SD card being in the plurality of specific Multiple write-protect switch states within a time period. Specifically, the SD card can be equipped with a write-protect switch (also called an anti-write switch) for the card reader 100 to determine whether the SD card is in a write-protected state, and the write-protect switch of the SD card can be used to increase the specific plug-in/out function. Modality encoding complexity. For example, during the first specific period of time, the write-protect switch of the specific SD card needs to be turned on; during the second specific period of time, the write-protect switch of the specific SD card needs to be turned off; and during the third specific period of time, the write-protect switch of the specific SD card needs to be turned on. The write-protect switch of the specific SD card needs to be turned on. The user must keep the write-protect switch in the correct state during the first specific time period, the second specific time period, and the third specific time period, corresponding to the memory of logical unit number #1 (such as the embedded multimedia memory card 130 ) can be displayed. It should be noted that the above-mentioned use of the write-protect switch to provide the change of the plug-in state is based on an SD card. If the specific memory device is implemented with other types of memory cards, any mechanical switch on these memory cards can also be used. A similar manner applies to the encoding of the plug-and-pull modality of the present invention.

In some embodiments, the plugging status may include the length of time that the particular memory device remains plugged in. For example, the length of time that the specific memory device remains in the inserted state must comply with the length of time corresponding to the encoding result recorded in the storage device 110M, the memory corresponding to the logical unit number #1 (such as the embedded multimedia memory card 130 ) can be displayed.

In some embodiments, the above-mentioned changes in plugging and unplugging patterns generated by the number of plugging and unplugging, multi-period detection, the position of the mechanism switch, and the length of plugging time can be combined using one or more of them to achieve as much as possible. This greatly increases the complexity of plugging and unplugging, thereby improving overall security. For the sake of brevity, relevant implementation changes are not described here.

In some embodiments, when the memory corresponding to logical unit number #0 (such as the specific SD card inserted in the SD socket 120) is removed, the memory corresponding to logical unit number #1 is accessed ( For example, the permissions of the embedded multimedia memory card 130) can be closed immediately. In some embodiments, when the memory corresponding to logical unit number #0 (such as the specific SD card inserted in the SD socket 120) is removed, the memory corresponding to logical unit number #1 is accessed ( For example, the permissions of the embedded multimedia memory card 130) can be delayed for a period of time. It is closed after a predetermined period of time. It should be noted that as long as the card reader 100 is powered off, the next time it is powered on, it needs to pass the verification of the specific SD card and/or the above-mentioned plug-in and pull-out mode again before the embedded multimedia memory card 130 can be accessed again. permissions.

Figure 3 is a schematic diagram of an electronic device 30 according to an embodiment of the present invention. The electronic device 30 may include a main device 50 and a card reader 300. It should be noted that the card reader 300 can be an example of the card reader 100, and the relevant details of the card reader controller 110 (and the processing circuit 110P therein), the storage device 110M, and the LED lights 141 and 142 are as follows. Not repeated. As shown in Figure 3, the card reader 300 can support five logical unit numbers, in which the SD socket 121 (for example, a memory card inserted into the SD socket 121) can correspond to the logical unit number #0, and the SD socket 122 (for example, a memory card inserted into the SD socket) can correspond to the logical unit number #0. The memory card 122) may correspond to logical unit number #1, and the embedded multimedia memory cards 131, 132, and 133 may correspond to logical unit numbers #2, #3, and #4 respectively. Either (eg, each) of SD sockets 121 and 122 may be an example of SD socket 120, and any (eg, each) of embedded multimedia memory cards 131, 132, and 133 may be an example of embedded multimedia memory. Card 130 example.

It should be noted that logical unit numbers #2, #3, and #4 do not all have to be protected by the above mechanism. For example, the private data in the memories corresponding to logical unit numbers #3 and #4 (such as embedded multimedia memory cards 132 and 133) can be protected by the above security mechanism, and the memory corresponding to logical unit number #2 The data in the body (such as the embedded multimedia memory card 131) is accessible by default. Therefore, when the card reader 300 is powered on or connected to the host device 50, even if no SD card is inserted into the SD sockets 121 and 122, the data in the embedded multimedia memory card 131 can still be read. display. In contrast, the user needs to use a specific SD to enable access to the embedded multimedia memory cards 132 and 133. In some embodiments, access to the embedded multimedia memory cards 132 and 133 may be enabled through the same specific SD card. For example, no matter which SD socket of the SD sockets 121 and 122 this particular SD card is inserted into, the permission to access the embedded multimedia memory cards 132 and 133 can be opened. In some embodiments, access to the embedded multimedia memory card 132 can be achieved by inserting a specific SD card into the SD socket. 121 to open, and access to the embedded multimedia memory card 133 can be opened by inserting this specific SD card into the SD socket 122. In some embodiments, access to the embedded multimedia memory card 132 can be enabled by inserting a first specific SD card into either of the SD sockets 121 and 122, as well as access to the embedded multimedia memory card 133. It can be opened by inserting a second specific SD card into either of the SD sockets 121 and 122. In some embodiments, access to the embedded multimedia memory card 132 can be enabled by inserting a first specific SD card into the SD socket 121 , and access to the embedded multimedia memory card 133 can be enabled by inserting a second specific SD card into the SD socket 121 . A specific SD card is inserted into the SD socket 122 to be turned on. It should be noted that since SD cards are typically difficult to copy, the storage device 110M may record a plurality of first specific SD cards and a plurality of second specific SD cards, where any of the plurality of first specific SD cards may be is inserted into the SD socket 121 to enable access to the embedded multimedia memory card 132 , and any one of the plurality of second specific SD cards can be inserted into the SD socket 122 to enable access to the embedded multimedia memory card 133 .

The above-mentioned control of access rights for multiple logical unit numbers can not only achieve security protection by hiding private data, users can also store work data and private data in different locations (for example, corresponding to different logical unit numbers). memory), with the help of the above access control to avoid operational errors.

In some embodiments, the card reader 100 (such as the card reader 300) can utilize the security protection mechanism provided by the embedded multimedia memory card 130 (such as any of the multimedia memory cards 131, 132 and 133) itself to The data is encrypted or the encryption and decryption mechanism built into the card reader 100 (such as the card reader 300) encrypts the data. When the specific SD card is inserted, the card reader 100 can encrypt the data corresponding to the specific logical unit number. Decrypt the data in the memory (such as the embedded multimedia memory card 130). As a result, although an interested person can forcibly take out the embedded multimedia memory card 130 installed inside the card reader 100, the data therein still cannot be successfully decrypted for reading.

In addition, the above-mentioned card reader 100 or card reader 300 can be applied to the unlocking operation of any device with a built-in card reader, such as a desktop computer and a notebook computer. Figure 4 shows an embodiment according to the present invention A schematic diagram of a notebook computer 40, in which the card reader 100 (especially the card reader controller 110, the storage device 110M and the SD socket 120) can be built into the notebook computer 40. In this embodiment, when the user wants to unlock and log in to the notebook computer 40, the user needs to insert the specific SD card into the SD socket 120, and the card reader controller 110 detects that the specific SD card is After insertion, it can be through an interface that complies with the Peripheral Component Interconnect Express protocol (marked as "PCIe" in Figure 4 for simplicity) or a general-purpose input/output interface (marked in Figure 4 "GPIO" for simplicity) is coupled to and communicates with the main device 50, where the main device 50 can control whether to unlock the laptop 40 for the user to log in in response to the detection result sent by the card reader controller 110.

Figure 5 illustrates the workflow of using a specific SD card to unlock the notebook computer 40 shown in Figure 4 according to an embodiment of the present invention. It should be noted that the work flow shown in Figure 5 is for illustrative purposes only and does not limit the present invention. In particular, one or more steps may be added, deleted or modified in the workflow shown in Figure 5. Furthermore, these steps do not have to be performed exactly as shown in Figure 5 as long as they do not interfere with the overall result.

In step S510, the user can insert the SD card into a card reader (such as the SD socket 120 shown in Figure 4).

In step S520, the card reader controller 110 may check the memory card identification data of the SD card to determine whether the identification data of the SD card has been recorded in the storage device 110M (labeled "Check" in Figure 5 The CID of the SD card can be used to determine whether it is a specific SD card for easier understanding). If the determination result is "Yes", proceed to step S530; if the determination result is "No", proceed to step S550.

In step S530, the card reader controller 110 may notify the system hardware and software of the host device 50 that the SD card is indeed the specific SD card (labeled "Notify the system hardware and software" in Figure 5 for simplicity. ).

In step S540, the main device 50 can unlock the notebook computer 40 for the user to log in.

In step S550, the main device 50 may maintain the notebook computer 40 in a locked state (at step S550). The figure is labeled "no action" for simplicity).

Figure 6 is a schematic diagram of a notebook computer 60 according to an embodiment of the present invention, in which the card reader 100 (especially the card reader controller 110, the storage device 110M and the SD socket 120) can be built-in. Laptop 60. In this embodiment, the card reader controller 110 can control one or more storage devices (such as solid state drives) in the notebook computer 60 through an interface that complies with the Fast Peripheral Component Interconnect Protocol or a universal input and output interface. Access rights. For example, the notebook computer 60 may include a system hard drive 151 (labeled as a "system disk" in Figure 6 for simplicity) and a data hard drive 152 (labeled as a "data disk" in Figure 6 for simplicity), The main device 50 can communicate with the system hard drive 151 and the data hard drive 152 through an interface compliant with the Peripheral Component Interconnect Express (shown as "PCIe" in Figure 6 for simplicity), and the card reader controller 110 The data hard drive 152 can be communicated through a general-purpose input and output interface (shown as "GPIO" in Figure 6 for simplicity). Specifically, the notebook computer 60 can always display the system hard disk 151, and the data hard disk 152 can be protected by the security mechanism of the present invention, so it will not be displayed on the operating system of the notebook computer 60 by default ( For example, the power supply of the data hard disk 152 may be initially turned off by default). When the user inserts the specific SD card, the card reader controller 110 can turn on the power or enable switch of the data hard disk 152 through the universal input and output interface, and use the thermal interface that complies with the Fast Peripheral Component Interconnect Protocol. The hot plug mechanism allows the data of the data hard disk 152 to be displayed on the operating system of the notebook computer 60 .

FIG. 7 is a schematic diagram of a docking station device 700 (referred to as a "USB docking station") that complies with the Universal Serial Bus protocol according to an embodiment of the present invention. In this embodiment, the USB docking station 700 may include a card reader (especially the SD sockets 121 and 122, the card reader controller 110 and the storage device 110M), and may also include a Universal Serial Bus compliant device. protocol hub 160 (referred to as the "USB hub"), ports 171 and 172 that comply with the Universal Serial Bus protocol (referred to as the "USB ports"), and an Ethernet device 180 that complies with the Universal Serial Bus protocol (referred to as the "USB port"). USB Ethernet") and RJ45 port 190. In this embodiment, the extended functions of the USB hub 160 (for example, used to couple the host device 50, Operations performed by USB ports 171 and 172, and one or more expansion interfaces of USB Ethernet 180) may be preset to a closed state, where the user may insert the particular SD card into SD socket 121 or 122, and when reading When the card reader controller 110 detects that the specific SD card has been inserted, the card reader controller 110 can enable the USB hub 160 through the general input and output interface (shown as "GPIO" in Figure 7 for simplicity). Extended functionality. Therefore, the present invention can prevent users without authority (for example, users who have not inserted the specific SD card into the SD socket 121 or 122) from using the expansion function of the USB docking station 700.

It should be noted that the interfaces that comply with the Fast Peripheral Component Interconnect Protocol, the interfaces that comply with the Universal Serial Bus Protocol, and the universal input and output interfaces described in the above embodiments are for illustration purposes only and do not limit the present invention. The implementation of these interfaces can be changed as long as it does not affect the overall implementation.

Figure 8 is a work flow of a rights management method according to an embodiment of the present invention, wherein the method can be applied to a card reader controller such as the card reader controller 110 of the above embodiment. It should be noted that the work flow shown in Figure 8 is for illustrative purposes only and does not limit the present invention. In particular, one or more steps may be added, deleted or modified in the workflow shown in Figure 8. Furthermore, these steps do not have to be performed exactly as shown in Figure 8 as long as they do not interfere with the overall result.

In step S810, the card reader controller 110 may receive identification data of an external memory device inserted into the card reader.

In step S820, the card reader controller 110 may determine whether the external memory device is a specific memory device (such as the specific SD card) based on the identification data to generate a determination result.

In step S830, the card reader controller may control whether to open the permission of at least one function based on the judgment result.

In summary, the card reader and related methods provided by embodiments of the present invention can use a specific external memory device as a key to unlock one or more functions of the electronic device. In addition, embodiments of the present invention can use the plugging and unplugging mode (such as the number of plugs and pulls or the plugging method) of the specific external memory device as a password. A data protection mechanism can be established without adding additional keyboards or fingerprint modules. Since the present invention can maintain the existing functions and appearance of a typical card reader, the present invention can provide an effective data protection mechanism with no or less side effects.

The above are only preferred embodiments of the present invention, and all equivalent changes and modifications made in accordance with the patentable scope of the present invention shall fall within the scope of the present invention.

10: Electronic devices

50: Main device

100:Card reader

110:Card reader controller

110P: Processing circuit

110M: storage device

120: Secure digital memory card socket

130:Embedded multimedia memory card

141,142:LED lamp

Claims (7)

A card reader includes: a storage device used to store specific identification data of a specific memory device; and a controller coupled to the storage device for receiving the external memory device from an external memory device inserted into the card reader. The identification data of the memory device, and based on the identification data and the specific identification data, it is judged whether the external memory device is the specific memory device to generate a judgment result; wherein the controller controls whether to open the permission of at least one function based on the judgment result. , and the at least one function includes accessing data in an embedded storage device corresponding to a specific logical unit number; wherein when the determination result indicates that the external memory device is the specific memory device, the controller detects the specific A plugging and unplugging pattern of the memory device is used to generate a detection result, and the plugging and unplugging pattern includes the number of plugging and unplugging of the specific memory device within a specific period of time. For the card reader described in Item 1 of the patent application, when the judgment result indicates that the external memory device is not the specific memory device, the controller avoids opening the permission of the at least one function. The card reader as described in item 1 of the patent application, wherein the specific memory device is a secure digital memory card, and the plug-and-pull state includes multiple write protections of the secure digital memory card within multiple specific time periods. switch status. For the card reader described in item 1 of the patent application, an electronic device includes the card reader, and the at least one function includes unlocking the electronic device. For the card reader described in Item 1 of the patent application, an expansion base device includes the card reader and one or more expansion interfaces, and the at least one function includes enabling the one or more expansion interfaces. A controller of a card reader includes: a processing circuit coupled to a storage device for controlling the operation of the controller based on data in the storage device, wherein the storage device is used to store a specific memory device Specific identification data; wherein: the controller receives the identification data of the external memory device from an external memory device inserted into the card reader, and determines whether the external memory device is the specific memory device based on the identification data and the specific identification data. , to generate a judgment result; the controller controls whether to open permission for at least one function based on the judgment result, and the at least one function includes accessing data in an embedded storage device corresponding to a specific logical unit number; and when When the judgment result indicates that the external memory device is the specific memory device, the controller detects a plug-and-pull state of the specific memory device to generate a detection result, and the plug-and-pull state includes the specific memory device in a The number of plugs and unplugs within a specific period of time. A permission management method, which is applicable to a controller of a card reader, the method includes: using the controller to receive identification data of the external memory device from an external memory device inserted into the card reader ; Use the controller to determine whether the external memory device is a specific memory device based on the identification data; Set to generate a judgment result; and use the controller to control whether to open the permission of at least one function based on the judgment result; wherein the at least one function includes accessing data in an embedded storage device corresponding to a specific logical unit number ; wherein when the judgment result indicates that the external memory device is the specific memory device, the controller detects a plug-in and unplug state of the specific memory device to generate a detection result, and the plug-in state includes the specific memory The number of times a device is plugged and unplugged within a specific period of time.

Images